997534 matches found
CVE-2026-69759
CVE-2026-69759 is a stack-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) , with the vector requiring user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), meaning an a...
CVE-2026-69764
CVE-2026-69764 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized, remote attacker to achieve code execution over a network , rated CVSS 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. User interaction is required, and no known exploitation has b...
EUVD-2026-73240
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
cve-2021-42013.get
Apache 2.4.50 - 路径遍历或远程代码执行 cve-2021-42013.py 是一个 Python 脚本，用于帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。我们提供了存在漏洞的 Docker 实例，以便您动手实践 CVE-2021-42013 如果启用了 CGI-BIN，那么我们可以执行远程代码执行，但不能执行路径遍历，因此我们在 httpd.conf 的 Alias 部分下添加了 "icons" 目录，用于检查路径遍历漏洞。 httpd.conf 中的漏洞配置 root@kitploit: 1. Enable CGI-BIN 2. Add...
EUVD-2026-73241
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73239
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
EUVD-2026-73154
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
CVE-2026-69742
CVE-2026-69742 is an integer overflow or wraparound vulnerability in Microsoft Office Publisher that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with the vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a low-complexity n...
CVE-2026-69724
CVE-2026-69724 is a missing authorization vulnerability in Microsoft Office SharePoint that allows an authorized attacker to achieve remote code execution over a network. The Microsoft CNA rates it CVSS 3.1 Base 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating low attac...
CVE-2026-69722
Microsoft Office Word is affected by a stack-based buffer overflow that enables an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires user interaction (e.g., opening a crafted document) but needs no prior authentication. The CVSS 3.1 score is 8.8 (H...
EUVD-2026-73148
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
EUVD-2026-73149
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-69671
A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that user interaction is required (e.g., opening a crafted docum...
EUVD-2026-73147
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
EUVD-2026-73139
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-69556
Microsoft Office Word is affected by a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted file) but no prior authentication, as reflected in the CVSS 3.1 base score of 8...
CVE-2026-69518
CVE-2026-69518 is a heap-based buffer overflow in Windows Remote Desktop that allows an unauthorized attacker to execute code over a network. The vulnerability is classified with CVSS 3.1 score 8.8 (HIGH) , with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , indicating network-reachable attack...
cve-2021-42013
Apache 2.4.50 - 路径遍历或远程代码执行 cve-2021-42013.py 是一个 Python 脚本，可帮助发现 Apache 2.4.50 中的路径遍历或远程代码执行漏洞。文中提供了易受攻击的 Docker 实例，供您动手实践 CVE-2021-42013 如果启用了 CGI-BIN，则可以执行远程代码执行，但无法进行路径遍历；因此，在 httpd.conf 的 Alias 部分中添加了“icons”目录，用于检查路径遍历漏洞。 httpd.conf 中的易受攻击配置 root@kitploit: 1. Enable CGI-BIN 2. Add "icons"...